Privacy policy
Last updated: July 24, 2026
At devotion.to ("devotion.to," "we," "us," or "our"), the things people share with us are personal. Photos of the people they love. Words they mean. We take that seriously, and this policy explains, in plain language, what we collect, why, where it lives, and the choices you have.
This policy applies to our storefront at devotion.to and our app at my.devotion.to (together, the "Service"). By using the Service, you agree to this policy.
Information we collect
Information you give us
- Order and contact details: your name, email address, shipping address, and order history. Payment is processed by Shopify and our payment providers; we do not store your full card number.
- Content you upload: the photos, text messages, names, dates, songs, links, and other details you add to build a page. Some of this can be personal or intimate. We treat it that way.
- Communications: messages you send us for support.
Information collected automatically
- Usage and device data: basic information such as your browser type, device, IP address, and how you interact with the Service, collected through cookies and similar technologies (see "Cookies" below).
Information from others
- Payment and fraud data from Shopify and payment processors, used to complete your order and help prevent fraud.
How we use your information
We use your information to:
- take and fulfill your order, including printing and shipping your physical product;
- create, host, and display the digital page you build;
- email you your private edit link and order updates;
- provide the optional AI writing assistant (see below);
- respond to support requests;
- detect, prevent, and address fraud, abuse, or technical problems;
- comply with our legal obligations.
We do not sell your personal information, and we do not use your uploaded photos or messages to serve advertising.
Where your data lives, and who can access it
Your account and page content are stored in our database and file storage, provided by Supabase. Uploaded media (like photos) is held in secured storage, and access is restricted through server-side controls.
Access to stored content is limited to what is necessary to operate the Service, provide support, and keep the Service safe and lawful. Our team does not browse your content casually; access happens only when needed (for example, to resolve a support issue you raise or to address a legal or safety matter).
About the privacy of your page
Anyone who has the page's web address can open it.
Some pages include playful features such as a "locked reveal" or an "unlock" prompt. These are for delight, not security. They do not encrypt your content or make your page private, and you should not treat them as protecting sensitive information. Please do not put anything on a page that would cause harm if someone other than the intended recipient saw it.
The AI writing assistant
If you use our optional "help me write" feature, the details you type into it (such as who the message is for and the tone you want) are sent to a third-party AI provider to generate a suggested draft. Suggestions are provided as a starting point for you to edit. We do not use your inputs to train external models, and we send only what is needed to generate your draft.
Cookies and tracking
We and our providers use cookies and similar technologies to keep the Service working (for example, keeping items in your cart), understand usage, and improve the experience. You can control cookies through your browser settings; blocking some cookies may affect how the Service works. Where required by law, we ask for your consent to non-essential cookies.
Third parties who help us run the Service
We share information with service providers only as needed to operate the Service. These include:
- Shopify - storefront, checkout, and order management.
- Supabase - database and file storage.
- Our email provider - to send order and edit-link emails. Klaviyo / Shopify Email
- Our AI provider - to generate optional writing suggestions.
These providers are permitted to use your information only to provide services to us. We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of our users, the public, or us.
How long we keep your data, and deletion
- Your page content is kept while your page is active so it stays available to the recipient.
- "Start Fresh": you can wipe a page's content and media at any time from the editor. This resets the page to blank while keeping the physical product working.
- Refunds and chargebacks: if an order is fully refunded or charged back, the associated page may be disabled and its content deleted.
- Order records: we retain order and transaction records as needed for accounting, legal, and fraud-prevention purposes.
You can request deletion of your personal data by contacting us at support@devotion.to. We will honor valid requests except where we are required or permitted by law to keep certain records.
Your rights
Depending on where you live, you may have rights to:
- access the personal information we hold about you;
- correct inaccurate information;
- delete your information;
- object to or restrict certain processing;
- request a copy of your information in a portable format;
- withdraw consent where processing is based on consent.
If you are in the EEA/UK (GDPR) or California (CCPA/CPRA), these rights apply to you as described in those laws, including the right not to receive discriminatory treatment for exercising them. We do not sell personal information as defined by these laws.
To exercise any right, contact us at support@devotion.to. We may need to verify your identity before acting on a request.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
Security
We use technical and organizational measures designed to protect your information, including restricted server-side access to stored content and encrypted connections. No method of transmission or storage is perfectly secure, but we work to protect your data and to keep the Service trustworthy.
Changes to this policy
We may update this policy from time to time. We will post the updated version here with a new "Last updated" date, and where appropriate we will notify you.
Contact us
Questions about this policy or your data? Reach us at support@devotion.to.